Password strength checker

Find out if your password is good enough

Type a password and the checker rates it from very low to strong, using four checks: does it contain a lowercase letter, an uppercase letter, a digit, and is it at least 8 characters long? Each check passed adds a level. Symbols don't change the score. It also shows the character count, so you can see at a glance whether a password is long enough.

Strength is about how many guesses an attacker would need. Short passwords and those made from a single dictionary word, a name or a date can be guessed quickly by cracking software. Long passwords that mix character types and avoid predictable patterns take vastly longer.

Use it to evaluate a password before you set it, or to understand why a site rejects your choice. Better still, generate a random password and store it in a password manager.

How to use the password strength checker

1. Type the password you want to test into the field.
2. Read the strength rating and the number of characters.
3. If it's rated low or moderate, make it longer and add more character types.
4. Consider replacing it with one from the password generator.

Examples

Common but rated strong

Input: Password1

Output: Strong

It has lowercase, uppercase, a digit and 8 characters, so it passes all four checks, yet it's one of the first passwords attackers try. Treat the rating as a minimum, not a guarantee.

Long passphrase

Input: correct horse battery staple

Output: Low

The same rating as abc123, because it only passes the lowercase and length checks. A long random passphrase is actually far harder to crack; adding a capital and a digit (Correct horse battery staple 7) gets it a Strong rating here.

Short password

Input: abc123

Output: Low

Too short and no uppercase.

Common uses

• Checking a new password before you set it on an important account.
• Teaching family members or staff what a strong password looks like.
• Setting rules for a password policy at work.
• Understanding why a website says your password is too weak.

Tips and things to know

• Length beats complexity. A long passphrase of several random words can be stronger than a short jumble of symbols.
• Avoid predictable substitutions like P@ssw0rd. Cracking tools try those first.
• A password that appears in a data breach is weak no matter how complex it looks. Use a unique password for every account.
• As a habit, don't type your real current passwords into websites. Test a similar pattern instead.
• Create a strong one in a click with the password generator.

Edge cases and limitations

• Symbols don't affect the rating. Use them anyway, since sites and attackers treat them as extra variety.
• The checker doesn't know about leaked or common passwords. Never reuse a password from another account.
• Everything runs in your browser and the password isn't sent anywhere.

Frequently asked questions

What makes a password strong?

Length (at least 12 to 16 characters), a mix of character types, no dictionary words or personal details, and being unique to one account.

Is a passphrase better than a password?

A passphrase of four or more random, unrelated words is long and easy to remember, which makes it strong for things you must type, like a master password.

Can a strong password still be hacked?

Yes, through phishing, malware or a website breach. That's why unique passwords and two-factor authentication matter as much as strength.

How long would it take to crack my password?

It depends on the attacker's hardware and how the site stored the password. Each extra random character multiplies the work, so length is the biggest factor.

Related tools

• Password generator: Generate passwords with custom length and custom settings.
• Random number generator: Generate a random number between a given range.
• Base64 encoder: Encode any string input to Base64.
• List randomizer: Easily convert a list of given text into a randomized list.